🛡️ Defensive Countermeasures Playbook

Windows (Desktop & Server)

• Objective: Enable and configure protective software like firewalls and anti-virus.
• Tools:
  • Windows Security
  • wf.msc (Windows Defender Firewall)
• Common Actions:
  • Enable Firewall: Go to Windows Security and ensure the Firewall is on for all network profiles (Domain, Private, Public).
  • Enable Antivirus: In Windows Security, go to “Virus & threat protection” and ensure “Real-time protection” is on.
  • Run a Scan: Run a “Quick Scan” or “Full Scan” for malware.
  • Encryption: If required, enable BitLocker (Drive Encryption). `

Linux (Mint 21 & Ubuntu 22)

• Objective: Enable and configure protective software like firewalls and encryption.
• Tools:
  • Terminal
• Common Actions:
  • Enable Firewall: The standard is UFW (Uncomplicated Firewall).
  • sudo ufw enable.
  • sudo ufw default deny incoming.
  • sudo ufw default allow outgoing.
  • Allow Essential Services: Explicitly allow required services, e.g., sudo ufw allow ssh.
  • Encryption: Check if home folder or full disk encryption is enabled.